This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: Yg2iJyjatw1BVpfH0s9NVINJqAOncSvmRX4lPIEZrgE= Subject key identifier: 5B:11:E9:2F:29:F0:FE:67:90:74:18:30:57:A7:4E:F9:6B:A4:D2:44 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: 0142 Signing time: Sun 21 Dec 2025 03:42:58 +0000 Manifest this update: Sun 21 Dec 2025 03:42:57 +0000 Manifest next update: Sun 28 Dec 2025 03:42:57 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: v8XLvYHB9IYcGa2jOiO+kOcnnVf+KRPBBCo3aizYi1U=) 2: 145B3B88C46B11F085C51F82C4F9AE02.roa (hash: J9CnTUyePYPB90BlLPftIH1AYzCyvJxP8FcjWilMdvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Dec 21 03:42:57 2025 GMT Not After : Dec 28 03:42:57 2025 GMT Subject: CN=69476cc2-6b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:b5:13:0a:fe:d9:b0:ac:cd:5a:ec:08:78: ea:5f:6b:0e:4f:14:7b:42:44:58:dd:2e:4b:64:a1: 79:99:36:46:22:77:73:6d:d2:4e:eb:e0:fe:50:5c: f3:35:3a:6c:78:b2:59:df:c6:05:fd:cd:47:0a:89: 94:be:20:5d:18:45:b4:fb:a7:12:78:71:69:32:f8: e5:6d:a4:74:e3:a7:7c:23:63:cf:05:4e:71:e7:7a: 7f:59:cb:ab:77:c5:eb:83:4b:0e:c2:09:d1:11:1b: bd:07:d6:26:66:22:05:23:b9:f7:23:b0:f2:68:4d: be:4d:f3:61:7f:85:70:b9:45:28:00:bb:cb:84:10: bd:79:dc:8e:75:4d:82:54:79:4a:a0:c6:56:bd:a7: 5b:a7:46:f3:90:16:9f:88:2c:85:d4:7e:49:38:33: 84:e3:3f:3e:8d:95:0f:6b:f7:68:89:12:e0:ed:b6: fa:d0:8d:f5:12:96:5a:83:27:95:8c:c0:ce:c4:c6: d0:73:97:7a:a1:da:c8:1c:f9:c2:c0:d9:72:50:16: bd:ad:40:f0:03:4a:b9:18:0b:34:5b:66:6c:fa:54: 82:9e:b6:47:75:6a:aa:03:c4:41:1a:fa:7d:1c:6c: f3:78:1f:2a:ef:93:f6:2f:2c:cd:7b:69:59:70:72: c0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:11:E9:2F:29:F0:FE:67:90:74:18:30:57:A7:4E:F9:6B:A4:D2:44 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:91:29:54:67:64:be:ab:28:57:80:3c:85:ec:35:6b:a1:e8: 43:db:9b:0f:9a:59:b9:c7:13:b7:84:cc:a4:6c:4f:ae:a5:20: c1:ea:db:cf:ae:b0:85:be:28:06:db:9a:c5:36:3b:cb:a9:2b: 25:d0:f5:f4:f5:da:1d:13:2f:da:e5:2c:82:bd:34:68:cd:5f: 75:8d:4c:3e:6f:26:6c:f4:1d:96:56:59:28:d5:13:c0:86:82: 68:cc:35:a9:59:f5:aa:32:96:e2:36:f5:4e:72:f3:ff:63:c9: 05:6b:7a:80:ed:70:eb:f5:4c:18:49:f9:b3:ea:be:ec:e1:ef: bd:92:49:82:74:b1:f2:92:d1:e3:c3:74:84:c0:fb:92:08:48: 73:54:fd:0a:d5:ea:3f:16:44:f8:61:95:7e:6f:39:28:6a:71: de:88:18:18:4d:34:a6:d2:42:85:75:35:26:97:4d:10:25:9c: 55:97:86:aa:d3:20:f7:74:24:8a:9c:93:48:62:77:2e:13:fd: 5c:7f:7a:b2:1b:f8:e3:19:b2:3a:c4:ca:5a:55:24:4d:11:46: f6:51:a1:a8:e8:b8:a1:e6:45:dd:9f:a9:8c:09:22:45:f5:79: c0:d2:39:57:c7:c9:21:6d:aa:4d:25:ee:71:a7:95:23:af:72: 86:19:6b:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjUxMjIxMDM0MjU3WhcNMjUxMjI4MDM0MjU3WjAYMRYwFAYD VQQDDA02OTQ3NmNjMi02Yjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvu1Ewr+2bCszVrsCHjqX2sOTxR7QkRY3S5LZKF5mTZGIndzbdJO6+D+UFzz NTpseLJZ38YF/c1HComUviBdGEW0+6cSeHFpMvjlbaR046d8I2PPBU5x53p/Wcur d8Xrg0sOwgnRERu9B9YmZiIFI7n3I7DyaE2+TfNhf4VwuUUoALvLhBC9edyOdU2C VHlKoMZWvadbp0bzkBafiCyF1H5JODOE4z8+jZUPa/doiRLg7bb60I31EpZagyeV jMDOxMbQc5d6odrIHPnCwNlyUBa9rUDwA0q5GAs0W2Zs+lSCnrZHdWqqA8RBGvp9 HGzzeB8q75P2LyzNe2lZcHLAaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsR6S8p 8P5nkHQYMFenTvlrpNJEMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBkSlUZ2S+qyhXgDyF7DVroehD25sPmlm5xxO3hMykbE+upSDB6tvP rrCFvigG25rFNjvLqSsl0PX09dodEy/a5SyCvTRozV91jUw+byZs9B2WVlko1RPA hoJozDWpWfWqMpbiNvVOcvP/Y8kFa3qA7XDr9UwYSfmz6r7s4e+9kkmCdLHyktHj w3SEwPuSCEhzVP0K1eo/FkT4YZV+bzkoanHeiBgYTTSm0kKFdTUml00QJZxVl4aq 0yD3dCSKnJNIYncuE/1cf3qyG/jjGbI6xMpaVSRNEUb2UaGo6Lih5kXdn6mMCSJF 9XnA0jlXx8khbapNJe5xp5Ujr3KGGWuY -----END CERTIFICATE-----Generated at Sun Dec 21 12:07:21 2025 by rpki-client